If you discover a security vulnerability in Fluxgate, please report it responsibly.

• Email: clusk@northecho.dev
• GitHub Security Advisory: Open a GitHub Security Advisory on this repository.

• A description of the vulnerability.
• Steps to reproduce the issue.
• The potential impact.
• Any suggested fixes, if applicable.

• Acknowledgment: Within 48 hours of receipt.
• Initial assessment: Within 7 days.
• Resolution target: Within 30 days for confirmed vulnerabilities.

This policy covers vulnerabilities in the Fluxgate codebase itself. For vulnerabilities found by Fluxgate in other repositories, see DISCLOSURE.md for our responsible disclosure protocol.